Active Directory Attack Paths — “Is everyone this bad?”